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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1. A request for continued examination under 37 CFR 1.114, including tliefee set 
fortli in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
4/8/2008 has been entered. 

2. This application was filed on 8-29-2000. Claims 1 - 24 are pending. Claim 1 
has been amended. Independent claims are 1, 9, 17. 

Response to Arguments 

3. Applicant's arguments filed 4/8/2008 have been fully considered but they are not 
persuasive. 

3.1 The 112 rejection is withdrawn since a private key or key not publicly published is 
disclosed within the specification. 

3.2 Applicant argues that the referenced prior art does not disclose, encrypting user 
key with private key of associated key pair. (Remarks Page 9) 

Applicant amended the claim limitation to use a private key for the encryption 
process when no specific type of key was originally indicated. Doonan discloses that 
the associated key is encrypted using a public key. But, Doonan also discloses in a 
different procedure that a private key within a public/private key pair can be used to 
encrypt information such as a message or a key. (see Doonan col 5, 11 48-50: encrypted 
with a private key corresponding to digital certificate (private key used for information 
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encryption; implies public key used for decryption)) Tliis encryption process is 
equivalent to Applicant's claimed limitation of an encryption process. A private key can 
be used to encrypt data or information. 

3.3 Applicant argues that the referenced prior art does not disclose, "preventing 
validation of the association of the user with messages". (Remarks Pages 9-10) 
The claimed invention discloses how to enable, "preventing validation of the 
association of the user with messages". The action to prevent this Is: "by revoking the 
associated key at the encrypting data processing system so that the encrypting data 
processing system is no longer able to decrypt the encrypted user key". The 
association key is deleted (erased) or revoked (revoked: see spec, page 15 lines 27-28 
"Associated key A may be revoked by simply erasing it from sen/er system 104.") as 
per specification by software component at the user system software component (data 
encryption system). 

The claimed invention does not address "the simple deletion at the sender (i.e., 
encrypting) system of a message recipient's public key does not "prevent validation of 
the association of the user with messages" and does not render the encrypting data 
processing system unable "to decrypt the encrypted user key" This argued claim 
limitation is not addressed in the claimed invention. (Remarks Page 10, II 12-15) The 
claimed limitation states the procedure to complete (revoke the key) in order to prevent 
validation of the association of the user with messages. 
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After an additional analysis of the applicant's invention, remarks, and a search of 
the available prior art, it was determined that the current set of prior art consisting of 
Doonan (6,807,277), Cook (6,732,101), and Marshall (4,888,800) which discloses 
applicant's invention. 



Ciaim Rejections • 35 USC § 101 

4. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and usefui process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this titie. 

5. The claimed invention is directed to non-statutory subject matter. Claims 17 ~ 24 

are directed towards a computer program product. The Specification discloses on page 

17, line 34 to Page 18, line 10 that: 

"Programs defining the functions of the present invention can be delivered to a data 
processing system via a variety of signat-bearing media, which include, without 
limitation, non-rewritable storage media (e.g., CD-ROM), rewritable storage media 
(e.g., a floppy diskette or hard disk drive), and communicatsors media, such as 
digital and analog networks. It should be understood, therefore, that such signal- 
bearing media, when carrying or encoding computer readable Instructions that 
direct the functions of the present invention, represent alternative embodiments of 
the present invention." 

The disclosure by the specification indicates that, Computer program production 

instructions can be carried by a signal-bearing media such as an analog network 

(carrier wave), which is non-statutory subject matter. (See MPEP 2106.01) 

Appropriate correction required. 



Claim Rejection - 35 USC §103 
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6. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the phor art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which the subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 1 - 4, 6 - 12, 14 - 20, 22 - 24 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Doonan et al. (US Patent No. 6,807,277) in view of Cook (US 
Patent No. 6,732,101). 

Regarding Claims 1, 9, 17, Doonan discloses a network messaging system. (Doonan 
col 1 , II 1 0-1 2: " . . . present invention is directed to a secure electronic messaging 
system ... ") Doonan discloses a method, a system and program product for managing 
a user key used to sign a message for a data processing system, the method 
comprising: 

a) assigning a user key to a user and storing the user key in an encrypted data 
processing system utilized to encrypt messages; (Doonan col 2, II 1-7: encryption 
key assigned by key server for message encryption) 

b) encrypting the messages with the user key; (Doonan col 2, II 7-8: message is 
encrypted) 

c) storing an associated key in the encrypting data processing system and encrypting 
the user key with the associated key to obtain an encrypted user key, wherein said 
associated key comprises a private key ; (Doonan col 5, II 63-67: generate an 
encrypted user key for transmission; col 5, II 48-50: additionally; encrypted with a 
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private key corresponding to digital certificate (private key used for information 
encryption; implies public key used for decryption))) 

d) the encrypting data processing system communicating at least one encrypted 
messages together with the encrypted user key to a recipient system in order to 
permit validation of an association of the user with the encrypted messages by the 
recipient system; (Doonan col 6, 1 1: encrypted message and encrypted key are 
transmitted to recipient) 

f) computer usable media bearing the control program. (Doonan col 3, II 9-12; col 9, II 
33-44: software exists on computer readable medium for program execution) 

Doonan discloses a check on the validation of a sender's credentials. (Doonan col 
5, II 16-20: sender credentials are verified) Doonan does not explicitly disclose 
revoking the associated key at the encrypting data processing system to prevent 
validation. 

However, Cook discloses: 

e) preventing validation of the association of the user with messages by revoking the 
associated key at the encrypting data processing system so that the encrypting 
data processing system is no longer able to decrypt the encrypted user key. (Cook 
col 6, II 40-50: association key deleted (revoked: see spec, page 15 lines 27-28: 
"Associated key A may be revoked by simply erasing it from server system 
104.") as per specification by software component at the user system software 
component residing (data encryption system)) 

The specification discloses the procedure to prevent validation of the association key 
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such as by revoking an associated l<ey. Cool< discloses an equivalent procedure for 
revoking or erasing or deleing the associated key. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Doonan to delete (revoke) an association key and 
prevent validation of the association of the user as taught by Cook. One of ordinary 
skill in the art would be motivated to employ Cook in order to enable a flexible and 
strengthened encryption system. (Cook col 2, II 33-38: "... Messages can be 
encrypted using any available encryption means at tlie sender and sent to a 
forwarding service. Tiie forwarding service can forward tiie message to eacii recipient 
according to tiie recipient's decryption capability and preference. ... ") 

Regarding Claims 2, 10, 18, Doonan discloses the method, system and program 
product according to Claims 1,9, 17, further comprising: 

a) decrypting the user key with the associated key; (Doonan col 6, II 1-3: encrypted 
key is decrypted) 

b) decrypting the messages with the user key. (Doonan col 6, II 1-3: encrypted 
message is decrypted) 

Regarding Claims 3, 11, 19, Doonan discloses the method, system and program 
product according to Claims 1,9, 17, wherein: the encrypting data processing system 
further comprises a client system and a server system coupled for communication, the 
client system (Doonan col 3, II 9-12: network connected client (sender) and server 
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system) having a client memory device and tlie server system liaving an encryption cliip 
and a server memory device: 

a) storing tlie user l<ey furtlier comprises storing tlie user l<ey in tlie client memory 
device; (Doonan col 9, II 44-47: memory area used for data and workspace 
storage) 

b) storing the associated key further comprises storing the associated key in the 
server memory device; (Doonan col 5, II 4-5: key is stored at server system 
database) 

Doonan discloses a check on the validation of a sender's credentials. (Doonan 
col 5, II 16-20: sender credentials are verified) Doonan does not explicitly disclose 
preventing validation of messages associated with the user by eliminating the 
associated key from the server memory device. 
However, Cook discloses: 

c) preventing validation further comprises preventing validation of messages 
associated with the user by eliminating the associated key from the server memory 
device. (Cook col 6, II 40-50: deletion (revocation) of association key at system via 
software component on server system in order to prevent validation) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Doonan to prevent validation of messages associated 
with the user by eliminating the associated key as taught by Cook. One of ordinary 
skill in the art would be motivated to employ Cook in order to enable a flexible and 
strengthened encryption system. (Cook col 2, II 33-38) 
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Regarding Claims 4, 12, 20, Doonan does not explicitly disclose a server system to 
receive, encryption and forward message. However, Cook discloses the method, 
system and program product according to Claims 3, 11, 19, wherein encrypting the 
messages further comprises: 

a) sending the messages to be encrypted from the client system to the server 
system; (Cook col 2, II 19-23: send message from client to server for encryption) 

b) encrypting the messages using the encryption chip of the server system; (Cook col 
2, II 51-55: encrypt message) 

c) sending the encrypted messages from the server system to the client system. 
(Cook col 2, II 51-55: deliver encrypted message to recipient (client) system) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Doonan to send messages, encrypt messages, and 
retrieve encrypted messages as taught by Cook. One of ordinary skill in the art would 
be motivated to employ Cook in order to enable a flexible and strengthened encryption 
system. (Cook col 2, II 33-38) 

Regarding Claims 6, 14, 22, Doonan discloses the method, system and program 
product according to Claims 1,9, 17, further comprising: encrypting the associated key 
by using an encryption chip key which is stored on an encryption chip of the encrypting 
data processing system. (Doonan col 2, II 3-8: encryption key transferred to sender 
system) 
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Regarding Claims 7, 15, 23, Doonan discloses tlie nnetliod, system and program 
product according to Claims 6, 14, 22, further comprising: 

communicating an encrypted associated key to validate the association of the user with 
the encrypted messages. (Doonan col 5, II 63-67) 

Regarding Claims 8, 16, 24, Doonan discloses the method, system and program 
product according to Claims 7, 15, 23, further comprising: decrypting the associated key 
with the encryption chip key. (Doonan col 6, II 1-3) 

8. Claims 5, 13, 21 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Doonan-Cook and further in view of Marshall (US Patent No. 4,888,800). 

Regarding Claims 5, 13, 21, Doonan-Cook does not explicitly disclose the ability to 
erase key information after processing of an encrypt message. However, Marshall 
discloses the method, system and program product according to Claims 4, 12, 20, 
further comprising: erasing from the server system all data relating to the encrypted 
messages after the encrypted messages are sent from the server system to the client 
system. (Marshall col 2, II 30-35: key information is erased from system) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify Doonan-Cook to erase all key related information after 
message processing maintaining only current information as taught by Marshall. One of 
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ordinary sl<ill in tlie art would be motivated to employ Marshall in order to enable a 
flexible and strengthened network key management system. (Marshall col 1, II 50-58: " 
. . . system has the advantage . . . only to maintain the l<eys required for whatever current 
communication sessions ... a pair of session keys . . . every time a link or session is 
requested ... ") 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to KYUNG H. SHIN whose telephone number is (571)272- 
3920. The examiner can normally be reached on 9:30 am - 6 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nathan J. FLYNN can be reached on (571) 272-1915. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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